CVE-2026-115319

A flaw was found in fzf. Inefficient string concatenation in the maskActionContents function allows a local attacker to cause a Denial of Service DoS. By repeatedly sending large HTTP requests to the local server, an attacker can block the single-threaded process and exhaust processing resources,...